Case study
CatCard: replacement firmware built around Coldcard bootloader contracts
CatCard implements Rust replacement firmware for Coldcard mk3, mk4, mk5 and Q1 hardware. It documents the protected bootloader's image layout, signature and callgate ABI, then builds board-specific wallet, storage and USB components against those fixed interfaces. The author reports that device builds run, while signing and several transports remain without end-to-end device exercise.
- Targets
- Firmware
- Category
- Independent reconstruction cases
- Relationship
- Independent reconstruction project
- Sources reviewed
- Stars
- 15
- Last commit
- 2026-10-17
- Language
- Rust
- License (GitHub)
- MIT
GitHub data as of 2026-11-09
Requirements & limits
- Prerequisites: Coldcard mk3, mk4, mk5 or Q1 hardware; firmware images use the bootloader's published developer signing key.
- Testing evidence: The author states the firmware is not ready to hold funds; signing, multisig, QR and NFC have not been exercised end to end on a device.
- License: MIT License.
Cite
BibTeX
@misc{catcard-coldcard-firmware-case,
title = {{CatCard: replacement firmware built around Coldcard bootloader contracts}},
howpublished = {\url{https://github.com/TibaneLabs/catcard}},
url = {https://github.com/TibaneLabs/catcard},
urldate = {2026-11-08},
note = {Awesome REA entry: \url{https://awesomerea.org/resources/catcard-coldcard-firmware-case/}}
}Plain text
CatCard: replacement firmware built around Coldcard bootloader contracts. https://github.com/TibaneLabs/catcard (accessed 2026-11-08). Awesome REA entry: https://awesomerea.org/resources/catcard-coldcard-firmware-case/
Useful? Star Awesome REA on GitHub2.4k
About this entry
The description was reviewed against primary sources.
Primary sources
- docs/ARCHITECTURE.md GitHub · TibaneLabs/catcard · Revision 038c37c
- README.md GitHub · TibaneLabs/catcard · Revision 038c37c
- LICENSE GitHub · TibaneLabs/catcard · Revision 038c37c
More in Firmware and hardware
- LaiNES: cycle-level NES hardware emulation · Case study
- EP4CE6 Bitstream Reverse Engineering: mapping Cyclone IV configuration bits · Case study
- Powar: emulating the Pokéwalker · Case study
- GameCube IPL: investigating and reconstructing the console BootROM · Case study
- GoPro Metadata Format Parser: mapping GPMD telemetry · Case study
- uLaunch: reconstructing the Nintendo Switch HOME Menu · Case study
All 260 entries in Firmware and hardwareFirmware and hardware case studies (175)